This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.mft File: DE8Lml_gOJ-ty7-x-hxAxKS6DSs.mft (raw, json) Hash identifier: rf7KNS7Iu7TAeKvF1HP4nMpLTT4asjW/X88DaBh6da4= Subject key identifier: 7F:EB:0B:EB:15:6A:2E:FA:7D:3E:DA:35:13:16:2F:CF:CE:7E:CE:D6 Authority key identifier: 0C:4F:0B:9A:5F:E0:38:9F:AD:CB:BF:B1:FA:1C:40:C4:A4:BA:0D:2B Certificate issuer: /CN=0c4f0b9a5fe0389fadcbbfb1fa1c40c4a4ba0d2b Certificate serial: 019C420F4B46FAE2A3C8E6354FE5628CDB3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.mft Manifest number: 14EA Signing time: Mon 09 Feb 2026 11:00:24 +0000 Manifest this update: Mon 09 Feb 2026 11:00:24 +0000 Manifest next update: Tue 10 Feb 2026 11:00:24 +0000 Files and hashes: 1: DE8Lml_gOJ-ty7-x-hxAxKS6DSs.crl (hash: BOzy2PsqeGpUv9N4g0fz0gCDB6/syXfMI1Ku6A+H5+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.crl rsync://rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.mft rsync://rpki.ripe.net/repository/DEFAULT/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:4b:46:fa:e2:a3:c8:e6:35:4f:e5:62:8c:db:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c4f0b9a5fe0389fadcbbfb1fa1c40c4a4ba0d2b Validity Not Before: Feb 9 11:00:24 2026 GMT Not After : Feb 10 11:00:24 2026 GMT Subject: CN=7feb0beb156a2efa7d3eda3513162fcfce7eced6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ff:3c:06:4c:ed:ee:20:a4:3f:dd:44:bf:44: d3:79:3e:2c:c4:69:37:b7:04:24:60:c9:c9:5d:47: 07:14:bc:99:09:d2:c0:e2:2e:29:02:a9:b7:a1:b4: cb:69:fa:46:8f:69:ec:f5:9c:43:c3:17:c8:fb:51: bc:7f:2f:8e:65:41:ea:68:76:5f:92:1b:31:18:d5: 6c:e7:6a:ad:e4:7f:a2:c1:cc:8e:0f:1f:21:2c:1c: 7c:2e:8d:ff:79:21:75:00:9c:52:24:cf:ce:b1:c2: b6:81:d0:c1:95:d5:b8:f0:26:33:29:77:cf:10:e4: 06:51:b0:34:7e:85:43:78:c2:e1:bc:a5:84:7b:88: eb:9d:7a:26:d9:8e:5d:1a:ee:91:76:0e:5d:f4:7a: 72:3b:33:8f:c7:90:88:99:9a:5c:c9:b9:be:a2:e9: ba:a1:cf:42:a4:de:b3:5b:e7:aa:a2:4f:a8:4e:27: a0:97:73:90:88:da:61:3f:50:81:4e:1f:58:8b:ec: 1e:0f:00:44:5e:69:df:34:2c:5b:31:55:5a:86:7d: 95:3b:e0:af:ee:83:3a:a8:4d:04:ee:2a:5b:0c:4c: 12:bf:3f:20:64:10:ec:ad:cc:ca:9c:88:c3:fd:29: 67:26:eb:2d:ee:a6:76:f5:0b:f0:23:72:3c:7d:19: 39:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:EB:0B:EB:15:6A:2E:FA:7D:3E:DA:35:13:16:2F:CF:CE:7E:CE:D6 X509v3 Authority Key Identifier: keyid:0C:4F:0B:9A:5F:E0:38:9F:AD:CB:BF:B1:FA:1C:40:C4:A4:BA:0D:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:3d:35:ae:1a:48:d4:29:50:83:4b:2b:ae:48:01:f9:9c:6b: 27:05:d5:73:ef:72:7a:74:42:cc:dd:dd:14:91:c2:ac:a6:46: f6:e8:b6:80:d0:3c:ac:6c:3a:50:b5:50:4d:72:7f:06:e8:c8: 4d:76:ef:1b:0c:eb:e9:c6:2e:ec:cd:a0:05:2a:9d:7f:bf:60: 74:13:c3:a7:0c:06:3b:d3:34:0d:ca:bb:dc:d0:7c:12:70:53: a4:96:b9:2d:0c:6e:28:4b:4e:f9:ad:47:a8:c7:94:73:01:4c: 42:fb:62:4b:35:58:26:90:5f:0e:b2:c0:f1:0e:a8:c1:55:4b: 36:8f:8e:ac:24:38:79:92:1a:d8:ae:df:b9:dc:cd:07:be:e7: 7c:ed:78:7f:ad:c1:84:22:d1:dc:31:06:4f:0c:ce:55:c8:cd: 8d:54:a9:71:58:f6:4d:43:36:02:cd:d7:46:3c:b0:fc:09:00: 04:77:1f:07:8e:46:7e:29:9d:e0:15:ea:dc:07:32:8d:c7:6a: c9:a6:7a:e3:a4:63:73:b8:67:07:2d:cd:73:0c:63:c4:66:f6: 9b:07:1c:60:ca:33:a0:d8:92:e6:9c:4d:2c:46:60:85:95:e9: ac:d5:09:da:58:62:08:01:cf:79:38:54:3f:37:e7:06:1d:e3: 81:33:f5:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD0tG+uKjyOY1T+VijNs7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNGYwYjlhNWZlMDM4OWZhZGNiYmZiMWZhMWM0MGM0YTRi YTBkMmIwHhcNMjYwMjA5MTEwMDI0WhcNMjYwMjEwMTEwMDI0WjAzMTEwLwYDVQQD Eyg3ZmViMGJlYjE1NmEyZWZhN2QzZWRhMzUxMzE2MmZjZmNlN2VjZWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxf88Bkzt7iCkP91Ev0TTeT4sxGk3 twQkYMnJXUcHFLyZCdLA4i4pAqm3obTLafpGj2ns9ZxDwxfI+1G8fy+OZUHqaHZf khsxGNVs52qt5H+iwcyODx8hLBx8Lo3/eSF1AJxSJM/OscK2gdDBldW48CYzKXfP EOQGUbA0foVDeMLhvKWEe4jrnXom2Y5dGu6Rdg5d9HpyOzOPx5CImZpcybm+oum6 oc9CpN6zW+eqok+oTiegl3OQiNphP1CBTh9Yi+weDwBEXmnfNCxbMVVahn2VO+Cv 7oM6qE0E7ipbDEwSvz8gZBDsrczKnIjD/SlnJust7qZ29QvwI3I8fRk5UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH/rC+sVai76fT7aNRMWL8/Ofs7WMB8GA1UdIwQY MBaAFAxPC5pf4Difrcu/sfocQMSkug0rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREU4TG1sX2dPSi10eTcteC1oeEF4S1M2RFNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS85MGJhMTctMDlkYy00YjdkLWE0NTMt ZjYwNmFjZTRhY2MyLzEvREU4TG1sX2dPSi10eTcteC1oeEF4S1M2RFNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS85MGJhMTctMDlkYy00YjdkLWE0NTMtZjYwNmFjZTRhY2My LzEvREU4TG1sX2dPSi10eTcteC1oeEF4S1M2RFNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPj01rhpI 1ClQg0srrkgB+ZxrJwXVc+9yenRCzN3dFJHCrKZG9ui2gNA8rGw6ULVQTXJ/BujI TXbvGwzr6cYu7M2gBSqdf79gdBPDpwwGO9M0Dcq73NB8EnBTpJa5LQxuKEtO+a1H qMeUcwFMQvtiSzVYJpBfDrLA8Q6owVVLNo+OrCQ4eZIa2K7fudzNB77nfO14f63B hCLR3DEGTwzOVcjNjVSpcVj2TUM2As3XRjyw/AkABHcfB45Gfimd4BXq3Acyjcdq yaZ646Rjc7hnBy3NcwxjxGb2mwccYMozoNiS5pxNLEZghZXprNUJ2lhiCAHPeThU PzfnBh3jgTP1dw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:49:11 2026 by rpki-client